ftp-pentesting

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill contains many examples that embed credentials directly into commands and URLs (e.g., ftp://user:pass@host, wget --user/--password, nmap -b :@...), which would require an LLM to insert secret values verbatim into generated outputs and thus poses a high exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The content is explicit, actionable offensive guidance: it describes credential brute-force, exploiting known backdoors (vsftpd 2.3.4), unauthenticated RCE (ProFTPD mod_copy), uploading webshells and reverse shells, FTP Bounce-based internal scanning and file exfiltration — clearly intended for unauthorized compromise and data theft.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该技能的运行流程以受测 FTP 服务器的响应/会话数据（例如执行 HELP/FEAT/STAT 获取服务器支持命令与配置并据此继续枚举与下载）作为 LLM 运行时可读输入，而这些文本内容可由外部受测服务端在交互中“注入”。